-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* Update JSON Handler to be able to update jsons after push to JSON Repo * Implement dockerignore * implement Webhook endpoint
- Loading branch information
1 parent
b3e01e5
commit f713c21
Showing
4 changed files
with
80 additions
and
17 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,5 @@ | ||
.idea/ | ||
**/json/ | ||
.github/ | ||
.venv/ | ||
!env/.env.example |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,53 @@ | ||
from fastapi import APIRouter, status, HTTPException | ||
from fastapi.requests import Request | ||
from starlette.responses import Response | ||
import json | ||
from src.data.json_handler import update_json | ||
import src.utils.log as log | ||
from src.cfg.settings import security | ||
import hashlib | ||
import hmac | ||
|
||
router = APIRouter( | ||
prefix="/wh", | ||
tags=["webhook"], | ||
include_in_schema=False, | ||
) | ||
|
||
|
||
class Webhook: | ||
def __init__(self, token): | ||
self.token = token | ||
|
||
def github_verify(self, payload, headers): | ||
signature_header = headers.get("x-hub-signature-256", None) | ||
if not signature_header: | ||
raise HTTPException( | ||
status_code=status.HTTP_403_FORBIDDEN, | ||
detail="x-hub-signature-256 header missing", | ||
) | ||
hash_object = hmac.new( | ||
self.token.encode("utf-8"), msg=payload, digestmod=hashlib.sha256 | ||
) | ||
expected_signature = "sha256=" + hash_object.hexdigest() | ||
if not hmac.compare_digest(signature_header, expected_signature): | ||
raise HTTPException( | ||
status_code=status.HTTP_403_FORBIDDEN, | ||
detail="Request signatures invalid.", | ||
) | ||
|
||
|
||
@router.post(path="/github", status_code=status.HTTP_204_NO_CONTENT) | ||
async def github_webhook(request: Request, response: Response): | ||
headers = request.headers | ||
payload = await request.body() | ||
json_payload = json.loads(payload) | ||
try: | ||
wh = Webhook(security["token"]) | ||
msg = wh.github_verify(payload, headers) | ||
except HTTPException as e: | ||
response.status_code = status.HTTP_400_BAD_REQUEST | ||
return | ||
|
||
if json_payload["action"] == "push": | ||
update_json() |